Description
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-07-30
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from an incorrect implementation in Chrome’s Tint rendering engine on macOS, enabling a crafted HTML page to escape the browser sandbox. This flaw can let a remote attacker gain code execution privileges on the user’s machine, compromising confidentiality, integrity, and availability. The weakness is classified under CWE‑693, indicating improper control of configuration data.

Affected Systems

Google Chrome for macOS versions prior to 151.0.7922.72 are affected. The issue is limited to the desktop releases of Chrome on macOS, and users should verify their installed version against the latest release – 151.0.7922.72 – to ensure no exposure.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.6, indicating critical severity. The EPSS score is reported as less than 1%, suggesting a very low exploitation probability at the time of analysis; however, the flaw is not listed in CISA’s KEV catalog. Attackers are likely to exploit the weakness through a malicious web page that a user visits, leveraging the flawed Tint implementation to escape the sandbox.

Generated by OpenCVE AI on August 3, 2026 at 11:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Google Chrome to version 151.0.7922.72 or later, following the instructions in the Chrome update notice
  • Enable Chrome’s sandbox and delete any unused extensions that might provide additional attack vectors
  • Use enterprise or user policy settings to block or filter content from untrusted origins until the update is applied

Generated by OpenCVE AI on August 3, 2026 at 11:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4710-1 chromium security update
Debian DSA Debian DSA DSA-6408-1 chromium security update
History

Sat, 01 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Chrome Mac sandbox escape vulnerability in Tint rendering engine chromium-browser: chromium-browser: Inappropriate implementation in Tint
Weaknesses CWE-653
References
Metrics threat_severity

None

 threat_severity

Low

Fri, 31 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Title Chrome Mac sandbox escape vulnerability in Tint rendering engine

Thu, 30 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-693
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 30 Jul 2026 07:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 30 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Description Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-30T14:12:46.841Z

Reserved: 2026-07-27T23:37:18.785Z

Link: CVE-2026-18015

cve-icon Vulnrichment

Updated: 2026-07-30T14:11:53.930Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-30T01:17:06.297

Modified: 2026-08-04T15:36:07.747

Link: CVE-2026-18015

cve-icon Redhat

Severity : Low

Publid Date: 2026-07-30T00:26:09Z

Links: CVE-2026-18015 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T11:45:03Z

Weaknesses
  • CWE-653

    Improper Isolation or Compartmentalization

  • CWE-693

    Protection Mechanism Failure